High 7.8Published Feb 22, 2024

CVE-2023-52444f2fs: fix to avoid dirent corruption

Updated under an hour ago (Oct 27, 2026, 9:23 AM ET)

Does this affect you?

It affects Linux and 4 other products. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid dirent corruption As Al reported in link[1]: f2fs_rename() ... if (old_dir != new_dir && !whiteout) f2fs_set_link(old_inode, old_dir_entry, old_dir_page, new_dir); else f2fs_put_page(old_dir_page, 0); You want correct inumber in the ".." link. And cross-directory rename does move the source to new parent, even if you'd been asked to leave a whiteout in the old place. [1] https://lore.kernel.org/all/20231017055040.GN800259@ZenIV/ With below testcase, it may cause dirent corruption, due to it missed to call f2fs_set_link() to update ".." link to new directory. - mkdir -p dir/foo - renameat2 -w dir/foo bar [ASSERT] (__chk_dots_dentries:1421) --> Bad inode number[0x4] for '..', parent parent ino is [0x3] [FSCK] other corrupted bugs [Fail]

CVSS: 7.8 HIGH (v3.1, CNA)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Modified
Record last updated: Oct 14, 2026
First seen by InfoSec Signals: Oct 14, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from 7e01e7ad746bc8198a8b46163ddc73a1c7d22339 before 02160112e6d45c2610b049df6eb693d7a2e57b46; from 7e01e7ad746bc8198a8b46163ddc73a1c7d22339 before 5624a3c1b1ebc8991318e1cce2aa719542991024; 7e01e7ad746bc8198a8b46163ddc73a1c7d22339 builds before 6f866885e147d33efc497f1095f35b2ee5ec7310; from 7e01e7ad746bc8198a8b46163ddc73a1c7d22339 before f100ba617d8be6c98a68f3744ef7617082975b77; from 7e01e7ad746bc8198a8b46163ddc73a1c7d22339 before f0145860c20be6bae6785c7a2249577674702ac7; from 7e01e7ad746bc8198a8b46163ddc73a1c7d22339 before d3c0b49aaa12a61d560528f5d605029ab57f0728; 7e01e7ad746bc8198a8b46163ddc73a1c7d22339 builds before 2fb4867f4405aea8c0519d7d188207f232a57862; from 7e01e7ad746bc8198a8b46163ddc73a1c7d22339 before 53edb549565f55ccd0bdf43be3d66ce4c2d48b28	CNA record
Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP siemens:simatic_s7_1500_cpu_1518_4_pn_dp_mfp (from the name)	from V3.1.0 before V3.1.5	CISA ADP
Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP siemens:simatic_s7_1500_cpu_1518f_4_pn_dp_mfp (from the name)	from V3.1.0 before V3.1.5	CISA ADP
Siemens SIPLUS S7-1500 CPU 1518-4 PN/DP MFP siemens:siplus_s7_1500_cpu_1518_4_pn_dp_mfp (from the name)	from V3.1.0 before V3.1.5	CISA ADP
linux linux_kernel linux:linux_kernel	from 4.2.0 before 4.19.306; from 4.20 before 5.4.268; from 5.5.0 before 5.10.209; from 5.11.0 before 5.15.148; from 5.16.0 before 6.1.75; from 6.2.0 before 6.6.14; from 6.7.0 before 6.7.2	NVD

References

References

https://git.kernel.org/stable/c/02160112e6d45c2610b049df6eb693d7a2e57b46	patch
https://git.kernel.org/stable/c/5624a3c1b1ebc8991318e1cce2aa719542991024	patch
https://git.kernel.org/stable/c/6f866885e147d33efc497f1095f35b2ee5ec7310	patch
https://git.kernel.org/stable/c/f100ba617d8be6c98a68f3744ef7617082975b77	patch
https://git.kernel.org/stable/c/f0145860c20be6bae6785c7a2249577674702ac7	patch
https://git.kernel.org/stable/c/d3c0b49aaa12a61d560528f5d605029ab57f0728	patch
https://git.kernel.org/stable/c/2fb4867f4405aea8c0519d7d188207f232a57862	patch
https://git.kernel.org/stable/c/53edb549565f55ccd0bdf43be3d66ce4c2d48b28	patch
https://lists.debian.org/debian-lts-announce/2024/06/msg00016.html
https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html
1–10 of 11

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.